topic Error while changing Syslog format in General Topics

Error while changing Syslog format

SThatipelly — Fri, 26 Jun 2020 19:36:44 GMT

I'm trying to send syslog to Qradar. As part of this, Qradar asked me to remove the spaces in the LEEF format but when I enter a single into GUI, spaces are auto created. How to remove them and feed as a single line in Palo?

can I do it via CLI instead?

Re: Error while changing Syslog format

BPry — Fri, 26 Jun 2020 20:38:33 GMT

@SThatipelly,

Are you adding a custom syslog format? If you are, simply delete the space in the 'Config Log Format' window after adding the field and you should be fine.

Re: Error while changing Syslog format

SThatipelly — Mon, 29 Jun 2020 02:25:44 GMT

yeah I'm trying to do that but Palo auto creates space between lines despite I remove the spaces and form it into a single line using notepad. When i try to clear the space at the end of the line, it deletes the letter instead of space. Has anyone noticed this?